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“  This  brochure  marks  yet  another  aspect  of  the  tremendous 
progress  being  made  in  Information  Warfare  (I  W).  Over  the  past  two 
yearSt  we  have  made  great  strides  in  raising  awareness  within  DOD, 
the  rest  of  Government  and  industry.  With  that  has  come  a  conviction 
to  act,  and  within  the  Joint  Staff,  we  have  formulated  an  IW 
implementation  strategy  designed  to  translate  vision  into  practical 
processes  and  capabilities  supporting  joint  warfighting. 

We  developed  this  brochure  to  outline  basic  IW  concepts  and 
summarize  ongoing  initiatives  implementing  those  concepts. 

Your  continued  support  is  needed  to  develop  and  support 
these  initiatives  and  those  yet  on  the  horizon,  ” 


PETER  PACE 
Lieutenant  General,  USMC 
Director  for  Operations 


ARTHUR  K.  CEBROWSKI 
Vice  Admiral,  USN 
Director  for  C4  Systems 


From  the  Chairman 


Information  Warfare  (IW)  has  emerged  as  a  key 
joint  warfi ghti ng  m i ssion  area.  The  explosi ve  prol i  feration 
of  information-based  technology'  significantly  impacts 
warfi ghting  across  all  phases,  the  range  of  militaiy 
operations,  and  all  levels  of  war. 


Our  reliance  on  technology  creates  dependency  and  vulnerabilities 
throughout  our  global  basing  and  information  support  networks  and  generates 
requirements  for  defensive  I W  capabilities.  However,  the  same  technologies 
also  create  vulnerabilities  for  our  adversaries  that  can  be  exploited  using 
offensive  I W  capabilities.  When  fully  developed  and  integrated,  I W  oiTers 
enormous  potential  to  support  our  warfighters. 


A  comprehensive  I W  approach  is  essential  to  ensure  warfighters  have  the 
tools  to  exploit  adversary-  vulnerabilities  while  ensuring  full  access  to  timely, 
accurate,  and  relevant  information  wherever  and  whenever  needed.  The  Joint 
Staff  developed  an  IW  vision  and  strategy  to  address  our  most  urgent  needs. 
The  concepts  outlined  in  this  brochure  provide  a  common  framework  to  guide 
our  continuing  and  expanding  efforts  in  this  vital  mission  area. 


JOHN  M.  SHALIKASHVILI 
Chainnan 

of  the  Joint  Chiefs  of  Staff 
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The  Compelling  Need 


Relevance  to  the  Warfighter 


Use  Breeds  Dependence 


Some  potential  adversaries  are  rapidly 
exploiting  information  and  information  system 
technologies  such  as  telecommunications, 
automated  data  processing,  sophisticated  decision 
aids,  remote  sensors,  and  other  related  systems. 

The  spectrum  of  applied  technologies  ranges  from 
established  radio  frequency,  microwave,  satellite, 
coaxial,  and  liber  optic  transmission  systems  to  new 
generations  of  digital  and  advanced  personal 
communications  systems.  The  availability  and 
relatively  low  cost  of  these  technologies  in  global 
markets  increase  the  likelihood  that  they  will  be 
employed  by  potential  adversaries  in  advanced 
command  and  control  (C2)  and  infomiation  systems, 
as  components  of  advanced  weapon  systems,  and 
asolTensive  IW  capabilities.  National-level 
infrastructures,  including  economic,  industrial,  and 
transportation  sy  stems  that  support  national  and 
militaiy  warfighting  objectives,  are  also  becoming 
increasingly  dependent  on  automated  control  and 
infomiation  systems  for  their  operation. 

The  information  age  is  here.  Rapidly  advancing 
information-based  technologies  and  an  increasingly 
competitive  global  environment  have  thrust 
information  into  center  stage  in  society',  government, 
and  warfare  in  the  2 1  st  Century.  Infomiation  and 
information-based  technologies  are  pervasive  and 
impact  every  facet  of  warfighting — from  planning, 
deployment,  and  sustainment  processes  to  the 
plethora  of  weapons  systems  employed  by  joint  task 
force  (.ITF)  commanders.  Timely,  accurate,  and 
relevant  information  is  absolutely  essential  to 
warfighting  as  large  force  stmetures  give  way  to 
smaller,  highly  trained,  and  technically  equipped 
forces.  Although  the  nature  of  w  ar  remains 
unchanged,  its  character  is  now  in  constant 
transition. 


Infomiation  itself  is  becoming  a  strategic 
resource  vital  to  national  security.  This  reality 
extends  to  warfighters  at  all  levels.  Increasingly 
complex  information  systems  are  being  integrated 
into  traditional  disciplines  such  as  mobility,  logistics, 
and  C4I.  Systems  are  designed  and  employed  with 
inherent  vulnerabilities  that  are  in  many  cases  the 
unavoidable  consequences  of  enhanced  functionality, 
efficiency,  and  convenience  to  users.  The 
complexities  and  vulnerabilities  of  these  information 
sy  stems  are  often  disguised  by  user-friendly 
software.  The  low  cost  associated  with  such 
technology  makes  it  efficient  and  cost  effective  to 
extend  the  capabilities  (and  vulnerabilities)  to  an 
unprecedented  number  of  users.  The  broad  access 
to,  and  use  of,  these  information  systems  enhances 
warfighting.  How'ever,  these  useful  capabilities 
induce  dependence,  and  that  dependence  creates 
vulnerabilities.  These  vulnerabilities  are  a  double- 
edged  sword  —  on  one  hand  representing  areas  the 
Department  of  Defense  (DOD)  must  protect  while 
on  the  other  hand  creating  new  opportunities  that 
can  be  exploited  against  adversaries. 
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Increasing  Speed  in  Flow  &  Processing 
of  Information 
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...File  decisive  edge  in  war 


Operation  DESERT  STORM  highlighted 
the  increasing  dependence  of  the  US  Armed  Forces 
on  information-based  technologies  and  their 
powerful  advantages.  However,  the  impact  was  only 
the  tip  of  a  much  larger  and  more  complex  reality  of 
the  evolving  information  age.  Military-  operations  and 
the  precise  application  of  decisive  combat  power 
are  critically  dependent  on  many  simultaneous  and 
integrated  tasks  that,  in  turn,  depend  on  information 
and  information  systems,  especially  those  tasks 
associated  with  critical  command  and  control 
processes.  Some  of  these  tasks  include; 

•  Conducting  strategic  deployment. 

•  Sustaining  theater  forces. 

•  Ensuring  force  protection,  both  in  garrison  and 
in  forw'ard-deployed  areas. 

•  Preservi  ng  theater  strategic  command  and 
control. 

•  Developing  strategic  and  theater  intelligence. 


Many  vital  warfighting  tasks  are  dependent 
upon  information  and  information-based 


Information  Warfare 

IW  focuses  on  a  target  set.  I W  is  an 
amalgam  of  warfighting  capabilities 
integrated  into  a  CINC’s  theater  campaign 
strategy  and  applied  across  the  range  of 
military  operations  and  all  levels  of  war. 


technologies.  Warfighting  information  systems  are 
linked  through  supporting  infrastructures,  thus 
exposed  to  attacks  by  a  broad  range  of 
adversaries  whose  motives  may  be  difficult  to 
measure.  Therefore,  the  difficulty  in  defending 
systems  and  processes  upon  which  our  warfighting 
capability  depends  is  increased,  and  their  defense 
is  absolutely  essential. 

The  continuing  growth  of  information  systems 
and  technologies  offers  nearly  unlimited  potential 
for  exploiting  the  pow  er  of  information  in  joint 
warfighting.  Because  there  are  no  fixed  boundaries 
in  the  information  environment,  the  labels  placed  on 
information  systems  and  associated  networks  may 
be  misleading.  Open  and  interconnected  systems 
are  coalescing  into  a  rapidly  expanding  global 
information  infrastructure  that  enfolds  the  US 
National  Information  Infrastructure  (Nil)  and  the 
Defense  Infomiation  Infrastructure  (Dll). 

The  Dll  is  embedded  within  and  deeply 
integrated  into  the  N 1 1 .  Their  seamless 
relationship  makes  distinguishing  between  them 
impossible.  The  two  share  terrestrial 
telecommunications  networks,  a  variety 
of  information  data  bases,  and  satellite 
communications  networks.  These 
infrastructures  connect  geographically- 
separated  forces  and  span  international 
boundaries. 


Defense  Information  Infrastructure 


Reach-Back  Support  for  the 
Warfighter 

The  successful  conduct  of  warfare  in  the 
information  age  requires  access  to  information 
available  outside  the  theater  of  operations. 
Information  infrastructures  no  longer  parallel 
traditional  command  lines,  and  warfighters  need 
frequent,  instant,  and  reliable  access  to  information 
at  locations  in  CONUS  as  well  as  in  theater.  For 
example,  mobility  and  sustainment  of  forces  are 
highly  dependent  on  commercial  “reach-back” 
infrastructures  that  include  international 
telecommunications,  the  public  switched 
network,  transportation  systems,  and 
commercial  electric  power  grids.  Warriors 
require  secure  video  teleconferencing,  detailed 
imageiy-  from  national  sources,  intelligence,  logistics, 


and  support  data  from  diverse  locations.  The 
technical  nature  of  these  information  infrastructures 
inhibits  a  commander’s  ability  to  control  the  flow 
of  information  or  dynamically  manage  available 
information  and  telecommunications  resources.  To 
support  offensive  operations,  warfighters  may 
reach-back  to  employ  information  attack  capabilities 
and  techniques  that  provide  an  information 
advantage  in  their  area  of  responsibility. 

Providing  capabilities  to  support  military 
operations  require  the  expansion  of  our  information 
infrastructure  beyond  the  established  peacetime 
information  environment.  Warfighters  must  have 
assurance  that  this  expanded  infrastructure  can  attain 
the  level  of  protection  required  to  enable  mission 


IW  impacts  all  phases,  the  range  of  military 
operations,  and  all  levels  of  war 
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A  teamed  approaeh  is  essential  to  develop  a 
comprehensive  IW  strategy 


success.  The  authority  to  implement  this  or  any  other 
level  of  protection  for  the  Nil  lies  outside  of  the 
Department  of  Defense  and  government.  We  must 
assist  in  demonstrating  to  service  providers 
the  compelling  need  for  a  collaborative,  teamed 
approach  in  crafting  solutions  -  not  just  to 
support  the  Department  of  Defense  and  to 
protect  our  national  security,  but  to  protect 
their  own  proprietary  interests  as  well. 

Our  dependence  on  information  and 
information  systems  and  the  exposure  of  our 
vulnerabilities  to  a  full  range  of  threats,  from 
computer  hackers  through  criminals,  vandals,  and 
terrorists  to  nation  states,  have  brought  focus  and 
compelling  relevance  to  the  emerging  discipline 
of  1 W.  Its  unique  characteristics  set  in  motion 
revolutionary'  capabilities  that  will  enhance  and 
support  warfighting  into  the  next  century. 


Information  Warfare  Basics 

1 W  involves  actions  taken  to  achieve 
information  superiority  by  affecting  adversary 
information,  information-based  processes. 
Information  systems,  and  computer-based  networks 
while  defending  one’s  own  information,  information- 
based  processes,  information  systems,  and 
computer-based  networks.  IW  applies  across  all 
phases,  the  range  of  military  operations,  and  at 
every  level  of  warfare.  Defensive  1 W  activities 
are  conducted  on  a  continuous  basis,  in  both 
peacetime  and  war,  and  are  an  inherent  part  of  force 
protection.  Offensive  IW  capabilities  may  be 
employed  in  a  variety  of  circumstances  across  the 
range  ofmilitary  operations.  1 W  operations  may 
involve  complex  legal  and  policy  issues  requiring 
careful  review  and  national-level  coordination  and 
approval. 
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As  an  integrating  strategy,  IW  focuses  on 
the  vulnerabilities  and  opportunities  presented  by  an 
increasing  dependence  on  information  and 
information  systems.  IW  targets  and  protects 
information,  inlbmiation  transfer  links,  information 
gathering  and  processing  nodes,  and  human 
decisional  interaction  with  information  systems.  It 
may  have  its  greatest  impact  in  peace  and  the 
initial  stages  of  crisis. 

1 W  is  one  of  many  capabilities  within  the  US 
military  clement  of  national  power.  I W  can  support 
the  overall  US  Government  (USG)  strategic 
engagement  policy  throughout  the  range  of  military 
operations.  The  effectiveness  of  deterrence,  power 
projection,  and  other  strategic  concepts  is  greatly 


affected  by  the  ability  of  the  USG  to  influence  the 
perceptions  and  decision  making  of  others.  In  times 
of  crisis,  IW  can  help  deter  adversaries  from 
initiating  actions  detrimental  to  the  interests  of  the 
USG  or  its  allies  or  to  the  conduct  of  friendly  military 
operations.  If  carefully  conceived,  coordinated  and 
executed,  IW  can  make  an  important 
contribution  to  defusing  crises;  reducing  the 
period  of  confrontation  and  enhancing  the  impact 
of  informational,  diplomatic,  economic,  and  military- 
efforts;  and  forestalling  or  eliminating  the  need  to 
employ  forces  in  a  combat  situation.  Thus,  I W  at 
both  the  national-strategic  and  theater-strategic 
levels  requires  close  coordination  among  a  wide 
variety  of  elements  of  the  USG,  including  the 
Department  of  Defense. 


Engagement  Timeline 
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The  decisive  edge  in  war 


IW  can  be  waged  in  wartime  within  and 
beyond  the  traditional  military-  battlefield.  As  a 
subset  of  1 W,  command  and  control  warfare 
(C2W)  is  an  application  of  I W  in  military- 
operations  that  specifically  attacks  and  defends  the 
C2  target  set.  However,  the  capabilities  and 
disciplines  employed  in  C2W  (psychological 
operations  (PS YOP),  deception,  operations 
security,  and  electronic  warfare)  as  well  as  other 
less  traditional  ones  focused  on  information 
systems  can  be  employed  to  achieve  1 W  objectives 
that  are  outside  the  C2  target  set. 


There  are  both  offensive  and  defensive 
aspects  of  IW.  A  common  link  between  the  two 
aspects  is  the  target  sets  involved  in  1 W  - 
information  and  information  systems.  Just  as  DOD 
can  use  IW  to  affect  the  information  and  information 
systems  of  an  adversary-,  so  too  can  an  adversary- 
target  DOD’s  information  and  information  systems. 
Understanding  the  basic  elements  and  the  potential  of 
otTensive  and  defensive  1 W  is  a  precursor  to  grasping 
the  integrated  I W  strategy  currently-  being  developed 
within  the  Department  of  Defense.  The  remainder  of 
this  brochure  will  outline  the  concepts  and  ongoing 
initiatives  in  the  emerging  discipline  of  I W. 


Spectrum  oflW  Objectives 


Defining  the  IW  Vision 


'‘The  threat  to  our  military  and  commercial  information  systems 

noses  a  significant  risk  to  national  security  and  is  being  addressed.  ” 

1996  National  Security  Strategy 


Organizing  Defensive  IW  (IW-D) 

I W-D  actions  must  be  carefully  considered, 
integrated  at  all  levels  ol  war,  and  applied  across  the 
range  ofmilitaiw  operations.  This  requires  1  W-D  to 
be  organized  as  a  system  and  tied  together  by 
policy,  doctrine,  technology,  capability  assessments, 
education,  training,  exercises,  and  a  mutually 
supporting  national  organizational  infrastructure. 
Along  the  way,  the  IW-D  system  can  be  integrated 


into  the  larger  system  of  wariighting  -  with  the 
overall  objective  of  capturing  the  latent  potential 
of  1 W  to  dramatically  enhance  warfighting  capability. 
Collaborative  elTorts  within  the  Department  of 
Defense  and  elsewhere  in  the  Federal  Government 
are  moving  rapidly  to  organize  and  implement  I  W-D 
as  a  system. 


IW-D  Implementation  Model 
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The  IW-D  System 

Organizing  I  W-[)  as  a  system  begins  with  a 
broad  vision  implemented  by  collaborative  etforts 
that  move  the  v  ision  and  concepts  from  the  abstract 
into  a  focused  set  of  questions  and  answers  on 
specific  aspects  of  policy  and  standards.  The  five 
critical  components  that  should  be  included  in  any 
attempt  to  implement  an  IW-D  system  are  integrity, 
authentication,  non  repudiation,  availability,  and 
conlldentiality.  IW-D  implementation  is  designed 
with  an  objective  of  information  assurance  to 
protect  access  to  timely,  accurate,  and  relevant 
information  w  herever  and  w  henever  needed. 

At  the  national  level,  the  Department  of  Defense  and 
other  elements  of  government  are  working  with 
industiy  to  ultimately  build  the  means  to 
appropriately  protect  and  defend  the  Nil  and  Dll, 
using  a  managed-risk  approach.  The  true  extent  and 
implications  of  IW-D  are  only  visible  in  a  top-level 
implementation  model.  This  model  is  scalable,  as  it  is 
applicable  at  all  levels  of  w  ar  and  across  the  range 
ofmilitaiA  operations. 

Elements  of  the  Model 

fhe  model  begins  with  a  defined  and 
appropriately  protected  and  defended  information 
environment.  Interacting  with  the  protected 
environment  is  a  process  to  identify  threats,  attacks, 
or  other  degrading  conditions  and  to  disseminate 
warnings  when  and  if  these  occur.  Attack  detection 
initiates  both  restoration  and  response  processes. 


The  Protected  Information 
Environment 

The  protected  information  environment  is  not 
an  impenetrable  fortress  that  guarantees  absolute 
security,  because  that  is  neither  practical,  alTordable, 
nor  even  necessary  .  The  focus  is  on  defining  real 
needs  and  dependencies,  fhe  environment  is 
bounded  by  what  is  critical  to  national  security.  It  is 
a  combination  of  physical  systems  and  places,  as 
well  as  abstract  processes  such  as  intelligence 
analysis.  The  protected  information  environment 
is  rooted  in  a  sound  approach  to  managing  risk. 
Risk  management  processes  include  consideration 
of  information  needs,  the  value  of  infomiation  that 
may  be  compromised  or  lost  if  the  protected 
information  environment  is  breached  (loss  of  access 
control),  system  vulnerabilities,  threats  posed  by 
potential  adversaries  and  natural  phenomena,  and 
resources  available  for  protection  and  defense.  In 
addition,  the  value  of  information  changes  in 
each  phase  of  military  operations  and  must  be 
considered  in  the  risk  management  process, 
fhe  protected  information  env  ironment  not  only 
provides  the  degree  of  protection  commensurate 
with  the  value  of  its  contents,  but  also  ensures 
mechanisms  are  in  place  to  respond  to  a  broad 
range  ofattacks. 


A  strategy  for  peace... 


average  intruder  has  dramatically  decreased. 


Threat 

Articulation  of  the  threat  must  be 
comprehensive  --  overstating  the  threat  leads  to 
unnecessar>  levels  of  protection,  expense,  and 
effort.  Conversely,  understating  the  threat  leads  to 
overconfidence  in  system  reliabilitv'  and  resilience 
under  adverse  conditions.  This  simple  realization 
underscores  the  vital  importance  of  a  clearly  defined 
and  articulated  threat.  National  intelligence 
organizations  continue  to  characterize  the  evolving 
threat — a  dynamic  mission  that  must  adjust  to 
changing  threat  conditions. 

To  get  at  the  essence  of  the  threat  requires  an 
understanding  of  three  elements: 

•  Identities  and  intentions  of  possible  attackers. 

•  Possible  attack  techniques  and  methods. 

•  Potential  targets,  extending  from  the  strategic  to 
the  tactical  levels. 

Indications  and  Warning 

fhreat  knowledge  is  an  input  to  a  process  that 
analyzes  attack  indicators  and  disseminates  warnings 
to  persons,  organizations,  and  processes  that  are 


determined  to  be  at  risk  or  require  w'aming 
indications  to  assist  them  in  other  decision-making 
processes.  A  comprehensive  IW  indications  and 
warning  (l&W)  regime  will  require  a  policy  structure 
to  establish  authorities,  roles,  and  responsibilities 
across  local,  state,  and  national  jurisdictions. 
Functionally,  I&W  for  IW  will  require  the  closest 
cooperation  between  law-  enforcement,  the 
Intelligence  Community,  and  private  enterprise.  In 
this  environment,  crippling  attacks  can  occur  at 
speeds  exceeding  unaided  human  capacity  to  detect, 
analyze,  and  disseminate  warnings.  I&W  will  not  occur 
without  acollaborative government-industry  effort. 

Attack  Detection 

Defensive  efforts  to  detect  and  identify 
adversaiT  activities  require  close  collaboration 
among  government,  industiy,  and  society.  A 
critical  element  of  the  detection  process  is 
identifying  indicators  of  adversary  activ  ity, 
analysis  of  those  indicators,  and  dissemination 
of  warnings.  This  process  requires  a  know  ledge  of 
the  threat  built  upon  information  from  various 
sources  including  law  enforcement,  the  Intelligence 
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Community,  system  providers,  and  users.  Finally, 
automated  attack  detection  capabilities  arc 
necessary ,  given  what  may  be  extremely  short 
timelines  from  initiation  to  the  culmination  ofattacks. 
Defending  against  an  attack,  whether  against  a  JTF's 
intelligence  data  base  or  against  an  automated 
component  of  the  commercial  national  power  grid, 
is  predicated  on  how  well  the  intelligence  threat  and 
associated  indications  and  warning  processes 
function  and  on  the  agility  of  systems  providers, 
users,  and  administrators  in  implementing  protective 
countermeasures. 

1  he  potential  subtlety  ofearly  indications  of 
adversary  prestrike  reconnaissance  and  exploitation 
techniques,  as  well  as  the  speed  with  which  a 
powerful  attack  can  proceed  from  initiation  to 
culmination,  mandates  a  need  for  automated 
intrusion  detection  capabilities.  These  capabilities 


must  automatically  detect  system  intrusions  or 
aberrations  and  instantly  generate  alerts. 

Additionally,  automatic  threat-mitigation  that  limits 
the  extent  ofdamage  or  spread  of  attack  must  be 
.selfinitiating. 

Restoration 

Attack  detection  mechanisms  trigger  reactive 
processes.  The  first  of  these  processes  is 
restoration.  Restoration  relies  on  a  pre- 
established  understanding  of  the  desired  levels 
and  conditions  of  system  performance  and 
functionality.  Priorities  may  be  then  derived  for 
restoring  access  to  and  availability  ol'essential 
information,  as  well  as  detect  when  anomalous 
conditions  have  degraded  systems  and  processes 
below  their  desired  steady-state  performance 
thresholds.  Procedures  for  restoration  of 
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telecommunications  exist  for  the  Department  of 
Defense  and  the  National  Communications  System 
(NCS).  fhe  NCS  facilitates  executive  and  technical- 
expert  dialogue  between  industry  and  the  NCA 
through  the  National  Security  Telecommunications 
Advisory'  Committee  (NSTAC).  In  the  infomnation 
age,  the  NSTAC  continues  to  play  a  vital  role  in  the 
Nation’s  total  1 W-D  posture. 

Response  Process  -  Motives 
and  Actors 

Attack  detection  mechanisms  serve  to  trigger 
the  response  process.  Timely  identification  ol' 
motives  and  actors  is  the  cornerstone  of  effective 
and  properly  focused  response,  linking  the  analytic 
results  of  the  l&W  process  to  national-level 
decision  makers. 

The  true  nature  of  motives  and  actors  engaged 
in  attacks  on  US  information,  systems,  or  processes 
of  national  interest,  whether  domestic  or 
international,  permits  an  understanding  of  the 


jurisdictional  environment  in  the  response  process. 

In  the  present  I W  environment,  the  clear 
identillcation  ofmotives  and  actors  will  not  lead  to  a 
simplified  set  of  automatic  response  processes  and 
options,  "fhis  is  true  because  the  seam  between  civil 
and  militarv  roles  in  national  securitv-  is  blurred  in  the 
case  of  1  W-D.  An  attack  against  a  commercial 
system  that  manifests  itself  in  a  DOD  network  raises 
legal  and  policy  issues,  thus  highlighting  the  need  for 
increased  interagency  coordination  and  joint  ci  vil- 
militarv'  response  operations.  Through  all  of  this, 
the  limits  of  the  proper  and  legitimate  role  of 
government  to  provide  for  the  common  defense 
must  be  recognized  and  respected,  ensuring  no 
violation  of  personal  freedoms  and  rights  of  privacy. 

The  effectiveness  of  the  response  process  is 
dependent  upon  efficient  integration  of  attack 
detection  and  analysis  capabilities.  Timely 
response  is  essential  to  influence  adversary 
perceptions,  establish  user  confidence,  and 
maintain  public  support. 


Attack  detection  and  restoral  requires  teamed  efforts'  supported  by  automation 
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Effective  response  reipiires  eoffahorative  interagency  efforts 


Attacks  theniselvcs  do  not  inlicrcntly  point  to 
tlic  motives  and  actors  in  an  unambiguous  \va>’. 
Apparently  similar  events  or  indications  ma\  have 
completelx  di ITerent causes,  sponsorship,  complicit\ , 
and se\erit\ .  I'he dilTerent  implications  ibr national 
securit)  point  to  the  w  isdom  ol'pixn  iding  decision 
makers  w  itli  the  best  and  most  comprehensive 
information  av  ailable  on  w  hich  to  base  decisions 
regarding  response  options.  As  such,  the  need  for 
full  cooperation  between  C'4  technolog\  and 
intelligence  processes  and  capabilities  is  clear. 

An  Assembled  IW-D  System 

Warfighters  depend  upon  information  to  plan 
operations.  deplo\  forces,  and  execute  missions. 
Additional!) .  advanced  information  technologies 
ha\e  signilicanti)  altered  these  processes.  Complex 
informtition  s>  stems  support  powerful  infrastructures 
that  dramaticalb  enhance  warfighter  capabilities; 
howe\  er.  increasing  dependence  upon  these  rapidb 
evoK  ing  technologies  make  joint  forces  more 
Milncrablc. 

I W-I)  is  a  comprehensive  strategy  being 
implemented  to  protect  and  defend  information  and 
information  s\  stems.  When  combined  with  offensive 


I W,  the  net  result  will  be  the  oppoilunity  to  use  IW' 
to  exploit  situations  and  to  w  in. 

Offensive  IW  (IW-0) 

As  with  the  IW-D  system  described  above. 

I  W'-O  capabilities  are  empkw  ed  at  eveiy  le\  el  of 
warfare  and  across  the  range  ol’militaiy  operations. 

I  he  employ  ment  ofoffensive  1 W  capabilities  to 
affect  an  advei-saiy 's  information  and  inlbrmation 
systems  can  yield  a  tremendous  advantage  to  I  IS 
militaiy  forces  during  times  oferisis  and  conllict.  As 
a  result,  combatant  commanders  must  carefully 
consider  the  potential  of  1 W  for  deterring  and 
rolling  back  crisis. 

When  viewed  as  an  integrating  strategv .  IW- 
weaves  together  related  disciplines  and 
eapabilities  toward  satisfy  ing  a  stated  objective. 
Offensive  IW  applies  traditional  perception 
management  disciplines  such  as  PSYOI’  and 
ini'ormation  system  attack  to  produce  a  synergistic 
effect  against  the  remaining  elements  of  an 
adversary’s  information  sv  stems,  information 
transfer  links,  and  information  nodes. 
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Examples  of  IW  Targets 

Leadership  Military  Infrastructure 


•  Key  Personnel 

•  ADP  Support 

■  Strategic  Comms 
Power  Base 


'  Commanders 
•  C2  Comm  Links 
'  C2  Nodes 
Troops 

Intel  Collectors 


Civil  Infrastructure 


Comms  (Links/Nodes) 
'  Industry 
'  Financial 
•  Populace 


Weapons  Systems 

Planes 
'  Ships 
•  Artillery 
PGMs 

Air  Defense 


Atlcick  ihc  iiifoi'nui/ioii  systems  unc! processes  thcil  support  these  toryet  sets 


lW-0  in  Military  Operations  Other 
Than  War  (MOOTW) 

Ofiensive  I W  related  plans  with  their 
assoeiatedeapabilities  may  be  employed  in 
peaeetime  to  deter  a  erisis,  control  crisis  escalation, 
project  power,  or  promote  peace.  The 

employment  of  offensive  IW  capabilities  in  these 
circumstances  may  require  NCA  approval  w  ith 
support,  coordination,  decontliction,  cooperation, 
and/or  participation  by  other  USCi  departments 
and  agencies.  Although  I W-O  capabilities  can  be 
employed  to  undermine  an  adversaiy’s  regime,  the 
priman  focus  of  1 W  efforts  in  MOO'fW  should  be  to 


preserve  the  peace,  deter  escalation  of  a  conflict,  and 
prepare  the  battlefield  so  that  if  crisis  escalated  to 
conflict,  the  US  military  can  effectively  employ  1  W-() 
capabilities  in  a  wartime  scenario.  Examples  of  other 
potential  peacetime  applications  of  offensive  IW 
include  the  employment  of  1 W  capabilities  to  disrupt 
drug  cartel  communications  lines  in  support  ofdrug 
interdiction  efforts  and  conducting  a  PS  YOP 
campaign  against  a  belligerent’s  potential  allies  with 
the  goal  of  severing  e.xtemal  sourcesofmilitar) , 
economic,  and  political  support. 
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Wartime  Employment  of  IW-0 

Beyond  the  threshold  of  crisis,  IW  can  be  a 
critical  force  enabler  for  the  Joint  warfighter.  In 
addition  to  protecting  infomiation  systems  vital  to  the 
US  military, employment  of  IW-()  capabilities 
can  affect  every  aspect  of  an  adversary’s 
decision  cycle  by  impacting  its  information 
centers  of  grav  ity  .  Many  of  the  activities 
associated  w  ith  w'artime  employment  of  IW-0 
capabilities  focus  on  the  military'  command  and 
control  target  set.  However,  there  are  many  other 
important  infomiation  system  targets  for  the 
warfighter  to  focus  on  to  fully  realize  the  power 
of  IW  in  wartime. 

One  type  of  information  attack  could  be  the 
application  of  IW  capabilities  against  an  adversary's 
automated  infomiation  systems  to  disrupt  production 
of  critical  war  supporting  industries.  Another 
application  might  be  the  use  of  I W  capabilities  to 
several!  adversary's  communications  networks  from 
the  external  niilitaiy,  economic,  and  political 
support-base. 

Deterrence 

There  are  two  aspects  of  deterrence 
associated  with  IW.  The  first  is  the  deterrent 
effect  IW-()  capabilities  can  have  on  a  potential 
adversary  during  peace  and  crisis.  As  new  IW 

capabilities  continue  to  emerge,  their  potential 
usefulness  to  deter  technology-dependent 
atlversaries  must  be  leveraged  as  much  as  possible. 

The  second,  more  specific  aspect,  is  the 
deterrence  of  an  information-based  attack 
against  the  United  States.  Deterring  IW  attack 
requires  the  application  of  both  offensive  and 
defensive  capabilities.  Strong  IW  defen.ses  help  to 
discourage  casual  threats,  thereby  narrowing  the 
playing  field  to  a  more  distinct  set  of  actors.  When 
faced  with  an  inforniation-hased  attack,  the  ability  of 


the  Nation  to  respond  quickly,  effectively,  and 
decisively  w'ill  inlluence  perceptions  and  assist  in 
deterring  future  attack.  In  this  regard,  inibmiatioii 
joins  economic,  political,  diplomatic,  legal,  and 
military  power  as  an  element  of  total  national 
strength.  The  preseiwation  of  infomiation  contributes 
to  the  total  power  of  our  Nation  and  society.  The 
result  is  a  new  fonn  of  strategic  deterrence  for  the 
infomiation  age. 

The  Vision  Comes  to  Closure 

National  leaders  are  able  to  choose  from  a 
broad  range  of  options  that  are  llexible  and 
combinable  to  achieve  the  desired  effect  in  most 
circumstances.  The  IW  vision  does  not 
demonstrate  a  nation  that  is  invulnerable,  but 
rather  one  that  is  vigilant,  decisive,  and 
prepared  to  respond  to  any  threat,  foreign  or 
dttmestic.  That  reality  contributes  to  strategic 
deterrence  in  a  context  appropriate  to  the 
infomiation  age. 


The  IW  vision... 

3ii]jportiiiy  3 tr  11 

in  the  Infcirriiatioo  Age 
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“I'Ve’  nuts!  have  Informal  ion  Superiority... Infonnalion  Superiority  will  recpiire  both 
offensive  and  defensive  information  warfare.  ” 

Joint  Vision  2010 


Taking  It  to  the  Troops 

A  common  focus  is  essential  to  ensure  a 
credible  I W  vision  becomes  a  reality.  The  three 
principles  of  the  Joint  Staffs  implementation 
vision  are: 

•  Reduce  the  opportunities  presented  to  potential 
adversaries  by  educating,  training,  and  increas¬ 
ing  the  aw  areness  ofvvarriors  to  vulnerabilities 
and  protective  measures. 

•  Improve  information  attack  capabilities  and 
measures  to  protect  against  and  detect  attack 
on  infomnation  and  infonnation  systems  by 
pursuing  emerging  technological  capabilities  and 
the  synergy  created  by  integrated 
defense-in-depth  .solutions. 

•  Build  the  necessary  relationships,  within  govern¬ 
ment  and  throughout  the  Nation,  to  secure  the 
infonnation  needs  of  all  constituencies.  Seal 
those  arrangements  in  law  and  policy,  resulting 
in  reconstituted  national  deterrence  to  preserve 
peace,  security,  and  stability. 

Kfforts  arc  under  way  to  integrate  I W  into  all 


aspects  of  joint  warfare.  The  .loint  Staff,  in 
cooperation  with  the  Services  and  Defense 
agencies,  is  focusing  on  a  common  approach 
toward  operationalizing  IW.  Efforts  in  six 
major  areas  are  coming  together  to  support 
the  w  arfighter.  They  include: 

•  Education,  training,  and  exercises 

•  Policy 

•  Doctrine 

•  Assessments 

•  Organizational  inirastructure 

•  Technology 

Education,  Training,  and  Exercises 
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Education,  training,  and  exercises  offer 
the  greatest  return  on  investment.  High-level 
militar\  education  at  the  National  Defense  University 
and  Ser\  ice  professional  military  education 
institutions  focus  on  the  study  of  IW  concepts, 
policy  issues,  doctrine  integration,  and  the  role 
of  I W  throughout  the  range  of  military  operations 
and  all  levels  of  war.  Additionally,  the  DOD  Inter- 
Serv'ice  Training  Review  Organization  Initiative  for 
Joint  IW  Training(DllJlT)  initiated  1 1  courses  for 
DOD  personnel.  These  courses  range  from  senior- 
level  awareness  to  technical  training  for  systems 
administrators. 

The  DIIJIT  is  a  great  success  story  that 
epitomizes  jointness.  Additional  courses  are 
forthcoming  that  will  continue  to  generate  and  focus 
I W  study  throughout  the  joint  environment. 

Information  systems  incident  reports  continue 
to  reveal  that  most  intrusions  result  from  a  lack  of 
understanding  and  improper  implementation  of 
security  measures  by  information  users.  Awareness 
and  training  modules  are  being  inserted  into  a  broad 
range  of  officer,  enlisted,  and  civilian  curriculum  that 
explain  vulnerabilities  inherent  in  information 
systems,  describe  potential  adversary  threats,  and 
educate  people  in  proper  system  use. 

Training  for  system  and  network 
administrators  to  identify  and  mitigate 
vulnerabilities  is  another  investment  y  ielding 
high  dividends.  Industry  places  a  premium  on  and 
commits  a  great  deal  ofresources  to  acquire  and  train 
specialists  to  administer  and  enforce  information 
systems  seeurit}’  policies.  The  Department  of  Defense 
should  follow  suit  in  this  area. 

At  the  organizational  level,  the  Joint  Staff  is 
accelerating  the  integration  of  I W  into  joint 
exercises.  Demonstration  of  I W  concepts  and 
capabilities  in  CINC-sponsored  e.xercises  will  help 
planners  and  users  better  integrate  I W  into 
operations.  Lessons  learned  from  incorporating 


IW  into  Joint  exercises  also  will  help  accelerate 
and  shape  policy  and  doctrine. 

IW  Policy 

The  Department  of  Defense  is  participating  in 
interagency  discussions  that  focuses  on  I W  policy 
issues  and  has  created  internal  executive  and 
working-level  forums  to  identify,  develop,  and 
implement  policies  and  concepts.  Across  a  broad 
range  of  issues,  1 W  efforts  are  examining  DOD’s 
role,  the  role  of  government  in  society,  and  the 
potential  impact  of  emerging  technologies  and  other 
factors.  A  Defense  Science  Board  study  is  also 
helping  to  fuse  national-level  and  DOD  efforts  in 
broad  areas. 

Given  these  considerations,  appropriate 
policy  positions  and  designation  of  responsibilities 
are  being  thoughtfully  considered  and  reflected  in 
DOD  and  CJCS  policy  documents.  The  Joint 
Staff  is  participating  in  the  revision  of  existing 
policy  in  addition  to  developing  new  I W 
instructions  where  needed.  Consistent  with  those 
efforts.  Chairman  of  the  Joint  Chiefs  of  Staff 


Defense  Science  Board  Objectives 

•  Identifying  the  information  users  of 
national  interest. 

•  Determining  the  scope  of  national 
information  interests  to  be  defended. 

•  Characterizing  the  procedures,  processes, 
and  operational  arrangements  required  to 
establish  a  comprehensive  national 
defense- in-depth  strategy. 

•  Identifying  the  reasonable  roles  of 
government  and  the  private  sector  in 
creating,  managing,  and  operating  a 
national  IW-D  capability. 
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Inslruction  (CJCSl)  32 1 0.01 ,  established  “.loint  I W 
Policy”  to  support  vvarllghting.  Also,  CJCSl 
65 1 0.0 1  A,  established  “Defensive  Information 
Warfare  Implementation,”  that  focuses  on  key  areas 
of  protecting  and  defending  information  and 
infonnation  systems. 

IW  Doctrine 

The  Joint  Staff  is  the  lead  agent  for 
developing  joint  doctrine  for  information 
w  arfare.  This  doctrine  will  include  both 
offensive  and  defensive  I W  principles.  Joint  I W 
doctrine  will  cover  the  organization  for  1 W, 
responsibilities,  coordination  between  levels  of 
command,  IW  planning  considerations,  integration 
and  decontliction  of  I W  activities,  and  intelligence 
support  to  I W.  1 W  doctrine  also  will  expand  upon 
the  principles  of  the  Joint  Pub  3-13. 1 ,  “Joint 
Doctrine  for  Command  and  Control  Warfare 
(C2  W).”  DOD  experiences  will  assist  in  illuminating 
broader  I W  concepts  extending  beyond  the  base 
doctrine  of  C2W.  fo  complement  this  doctrine 
effort,  the  revision  to  the  Joint  Operation  Planning 
and  execution  System  will  fully  integrate  I W  into  the 
operations  planning  process. 


process  by  the  Chairman’s  Program  Assessment. 

Organizational  Infrastructure 

Many  components  have  begun  to  organize  to 
support  1 W'  activities.  The  interagency  coordination 
requirements  so  central  to  I W  effectiveness  require 
careful  attention  to  current  organizational 
approaches. 

Services  and  Defense  agencies  have  initiated  or 
expanded  some  capabilities  to  respond  to  security 
incidents  and  perfonn  vulnerability  assessments  to 
fielded  systems.  These  eapabilities  will  play  a  vital 
role  in  mitigating  vulnerabilities  overtime. 

Most  of  the  combatant  commands  have 
formed  a  tailored  1 W  cell  to  meet  the  challenges 
presented  by  this  emerging  area.  To  provide  the 
support  the  ClNCs  require,  the  Joint  Staff  has 
focused  responsibility  forClNC/operational  support 


Assessments 

Capability  assessments  foeus  on  the 
programmatic  aspects  of  I W.  The  Joint 
Wartlghting  Capabilities  Assessment  process, 
under  the  guidance  of  the  Joint  Requirements 
Oversight  Council  and  with  CINC  participation, 
serves  as  the  primary  analytic  tool  to  support 
the  Chairman  in  articulating  joint  wartlghting 
requirements,  fhis  process  achieves  its  objective 
by  zeroing  in  on  two  key  milestones  of  the  Planning, 
Programming,  and  Budgeting  System  (PPBS).  First 
istheChainnan’s  Program  Recommendations 
leading  to  focused  language  in  the  Defense  Planning 
Guidanee.  This  is  followed  later  in  the  PPBS 


Building  infonnaiion  warfare  means 
merging  traditionally  separate  diseiplines 


Advamcil  iii/ormcifioii-hasec/  Icchnoloisic.s. 


a  key  encih/cr  of  the  IW  vision 


aspects  of  IW  within  the  Operations  Directorate 
through  tlie  creation  ol'an  I W'  cell  that  mirrors  those 
at  the  combatant  commands. 

Intelligence  underpins  I W  operations  in  peace, 
crisis,  and  war.  Critical  to  the  continued  success 
of  IW-I)  efforts  will  be  the  av  ailability  of 
intelligence  to  support  a  comprehensive  threat 
awareness.  Ongoing  Intelligence  Community 
elTorts  have  produced  initial  assessments  of  the 
foreign  threat,  and  other  elTorts  are  under  way  to 
expand  that  work.  A  comprehensive  and  rigorous 
understanding  of  the  total  threat  is  a  critical 
requirement  to  develop  a  credible  risk  management 
strategv .  effective  and  focused  training,  education, 
and  awareness  programs. 

The  Intelligence  Community  also  is  stepping  up 
to  the  unique  requirements  of  targeting  and  battle 
damage  assessment.  These  efforts  will  require  new 
processes  and  techniques  to  link  the  intelligence  and 
operational  communities.  The  net  effect  will  be  an 
intelligence  community  that  is  prepared  and  focused 


to  meet  the  signi  ficant  challenges  that  lay  ahead  in  1 W. 

Technology 

Infomiation-based  technology  is  a  principal 
enabler  of  the  I W  vision.  The  Joint  Staff  continues 
to  develop  and  maintain  ties  with  government  and 
industry  laboratories  to  keep  abreast  of  the  latest 
discoveries  and  to  explore  ways  to  leverage 
technology  to  support  I W  requirements. 
Maintaining  ties  to  academic  and  scientific 
organizations  provide  a  glimpse  at  the  leading 
edge  thinking  that  may  influence  future 
warfighting  strategy  and  doctrine,  fhis  process 
also  provides  valuable  insights  that  can  direct  cutTent 
I W  capabilities  and  architectures  in  favorof 
emergine  trends. 


Conclusions 


An  Assembled  Vision 


Wc  have  entered  an  age  ol'  information  where 
nations  and  niilitar\  organizations  have  opportunities 
to  gain  deeisi\  e  advantage  through  timely  access  to 
accurate,  relevant  information.  Information  is  fast 
becoming  a  strategic  resource  that  will  drive  a  global 
competitive  environment  and  penncate  eveiw  facet 
of  vvarfighting  in  the  2 1 century'. 

Warfighters  depend  upon  information  to  plan 
operations,  deploy  forces,  and  execute  missions. 
Additionally  ,  advanced  information  technologies 
have  signitlcantly  altered  these  processes.  Complex 
information  sy  stems  support  powerful  infrastructures 
that  dramatically  enhance  warfighter  capabilities; 
however,  increasing  dependence  upon  these  rapidly 
evolving  technologies  makes  joint  forces  more 
vulnerable.  Conversely  ,  many  of  these  same 
vulnerabilities  extend  to  our  adversaries,  offering 
new  opportunities  to  use  offensive  capabilities  to 
help  gain  a  friendly  advantage. 

1 W  concepts  are  being  implemented  to  protect 
and  defend  information  and  information  systems. 
When  combined  w  ith  ofl'cnsive  1 W,  the  net  result 


will  be  the  opportunity'  to  use  1 W  to  exploit 
situations — and  to  win. 

1 W  is  a  reality  today  and  in  the  future;  it 
impacts  societies,  governments,  and  the  range  of 
military  operations,  and  all  levels  of  war. 
Implementing  the  1 W  vision  is  a  challenging  task. 
Warriors  should  understand  1 W  and  its  relevance  to 
survive  and  fight,  now  and  in  the  future.  This  concept 
has  set  forth  a  common  vision  that  will  generate  an 
awareness  of  the  strategy  and  the  many  complex 
issues  yet  on  the  horizon. 

The  Joint  Staff,  in  cooperation  with  the 
Services,  combatant  commands  and  Defense 
agencies,  is  w  orking  tow  ard  implementing  the 
common  vision  highlighted  in  this  brochure.  Efforts 
are  under  way  now.  Waniors  must  help  implement 
these  concepts  to  capture  the  latent  potential  of 
Information  Warfare  -  a  strategy  for 
peace... the  decisive  edge  in  war. 
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For  questions,  comments,  or  additional  copies  of  this  document,  please  contact 
The  Joint  Staff,  Information  Assurance  Division  (J6K),  (703)614-2918,  or  the  Informa¬ 
tion  Warfare  -  Special  Technical  Operations  Division,  J-38,  (703)  695-0392 
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